Search vulnerabilities

Results 2

Export CSV
CVE-2008-5762

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Vendors
CVE-2008-5763

PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path parameter.

CVSS 2.0 · 7.5 High EPSS 39.2% KEV · Not listed
Vendors